Secure direct memory access
AssigneeIntel Corporation
InventorsJAYANT MANGALAMPALLI, VENKAT R. GOKULRANGAN
Life of this patent
Estimating the term…
Abstract
Examples are disclosed for establishing a secure destination address range responsive to initiation of a direct memory access (DMA) operation. The examples also include allowing decrypted content obtained as encrypted content from a source memory to be placed at a destination memory based on whether destination memory addresses for the destination memory fall within the secure destination address range.
Claims29
A method implemented at host computing device comprising:
- establishing a secure destination address range responsive to initiation of a direct memory access (DMA) operation that includes obtaining encrypted content from a source memory, decrypting the encrypted content, and placing the decrypted content at a secure destination memory;
- receiving one or more destination addresses associated with the secure destination memory;
- and
- allowing the decrypted content to be placed at the secure destination memory based on the one or more destination addresses falling within the secure destination address range.
An apparatus comprising:
- a processor circuit;
- and
- a memory unit communicatively coupled to the processor circuit, the memory unit arranged to store a destination manager operative on the processor circuit to establish a secure destination address range responsive to initiation of a direct memory access (DMA) operation to move encrypted content from a source memory, decrypt the encrypted content, and place the decrypted content at a secure destination memory, the destination manager also operative to receive one or more destination addresses associated with the secure destination memory and allow the decrypted content to be placed at the secure destination memory based on the one or more destination addresses falling within the secure destination address range.
An article of manufacture comprising a storage medium containing instructions that when executed cause a direct memory access (DMA) system for a host computing device to:
- establish a secure destination address range responsive to initiation of a DMA operation that includes obtaining encrypted content from a source memory, decrypting the encrypted content, and placing the decrypted content at a secure destination memory;
- receive one or more destination addresses associated with the secure destination memory;
- and
- cause the decrypted content to be placed at the secure destination memory based on the one or more destination addresses falling within the secure destination address range.
Dependencies are inferred from the claim text.